Security Issues in a Hybrid Cloud Environment CERTIFIED-HYBRID-CLOUD-IMPLEMENTATION-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company must comply with GDPR and stores personal data in Azure Blob Storage. An audit finds that some blobs are publicly accessible. The company has Azure Policy that denies public access for storage accounts. What is the most likely reason the blobs are still accessible?

   • AThe blobs were made public before the policy was assigned and the policy does not remediate existing resources.
   • BThe blobs are in a different Azure region.
   • CThe storage account is using a different encryption method.
   • DThe policy is not assigned to the subscription.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company uses Azure Key Vault to store encryption keys for disks of Azure VMs. After a security incident, the security team rotates the keys. The VMs continue to run, but new VMs created from a captured image fail to start with a disk encryption error. What is the most likely cause?

   • AThe captured image is encrypted with the old key, and the new VMs cannot access the old key because it was disabled.
   • BThe VMs are not using Azure Disk Encryption.
   • CThe new key is not yet active in Key Vault.
   • DThe Key Vault is in a different region than the new VMs.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which characteristic is a common security challenge that is specific to hybrid cloud environments?

   • AThe lack of network connectivity options between on-premises and cloud
   • BThe requirement to use the same identity provider for all users in a single cloud
   • CThe need to manage consistent security policies across both on-premises and cloud infrastructures
   • DThe inability to encrypt data at rest in any cloud environment
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company uses Azure AD for identity and has a hybrid setup with on-premises Active Directory. A user reports they can sign in to on-premises resources but cannot access an Azure AD-integrated application. The user's account is synced. What is the most likely cause?

   • AThe application is not configured for single sign-on.
   • BThe user is not assigned to the application in Azure AD.
   • CThe user's password hash is not synced to Azure AD.
   • DThe user's account is locked out in on-premises AD.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A hybrid cloud environment uses a VPN connection between on-premises and cloud. Users report intermittent connectivity to cloud resources. What is the most likely network security misconfiguration to investigate first?

   • AThe VPN tunnel is not encrypted
   • BIncorrect firewall rules on the on-premises firewall
   • CThe on-premises router is not configured for dynamic routing
   • DThe cloud VM does not have a public IP address
   Reveal Solution Discussion Select an answer first